Skip to main content
akileshc
Staff
Staff
October 17, 2019

Technical Tip: How to Exclude an Individual member from the Address group

  • October 17, 2019
  • 0 replies
  • 3776 views

Description
This article provides the configuration procedure to Exclude a members from the Address group.

Solution
Once the 'exclude' option is enabled over the specific address-group, it is possible to remove a Individual member from a specific address group.
In below mentioned example, 'IT-Users' is one of the member that belongs to the address group "Local_Users".

CLI Reference:

#config firewall addrgrp
    edit "Local_Users"
        set uuid 3bff87ac-e5e2-51e9-416a-42748064bc53
        set member "IT-Users" "Engineering"
        set comment ''
        set exclude enable
        set visibility enable
        set color 0
        set exclude-member "IT-Users" <- Member excluded from the user group
    next
End

GUI:

Commands to verify:
# sh full firewall addrgrp <*name>
*name    Address group name.

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.